// npm package
crypto-javascript
JavaScript library of crypto standards.
versions
14
maintainers
1
license
MIT
first publish
2026-05-12
publisher
evanseberg
tarball
1,463,582 B
AUTO-PUBLISHED·1 version indexed·latest published 2026-05-26
// offending code· @4.3.6· 2 files flagged
- @4.3.6··AUTO-PUBLISHED·publisher: evansebergheuristic 75/100static flags 1llm skippedinstall-scripts:preinstallnew-publisher:10dmature-packagehas-source-repoosv-flagged:MAL-2026-4542public-github-push
// offending code· 2 files flaggedpatterns: 1
--- install scripts --- ### preinstall ./bin/install-deps --- package/bower.json (excerpt) --- { "name": "crypto-js", "version": "4.2.9", "description": "JavaScript library of crypto standards.", "license": "MIT", "homepage": "http://github.com/brix/crypto-js", "repository": { "type": "git", "url": "http://github.com/brix/crypto-js.git" }, "keywords": [ "security", "crypto", "Hash", "MD5", "SHA1", "SHA-1", "SHA256", "SHA-256", "RC4", "Rabbit", "AES", "DES", "PBKDF2", "HMAC", "OFB", "CFB", "CTR", "CBC", "Base64", "Base64url" ], "main": "index.js", "dependencies": {}, "browser": { "crypto": false }, "ignore": [] } --- package/package.json (excerpt) --- { "name": "crypto-javascript", "version": "4.3.6", "description": "JavaScript library of crypto standards.", "license": "MIT", "author": { "name": "Evan Vosberg", "url": "http://github.com/evanvosberg" }, "homepage": "http://github.com/brix/crypto-js", "repository": { "type": "git", "url": "http://github.com/brix/crypto-js.git" }, "keywords": [ "security", "crypto", "Hash", "MD5", "SHA1", "SHA-1", "SHA256", "SHA-256", "RC4", "Rabbit", "AES", "DES", "PBKDF2", "HMAC", "OFB", "CFB", "CTR", "CBC", "Base64", "Base64url" ], "main": "index.js", "scripts": { "preinstall": "./bin/install-deps" }, "dependencies": {}, "browser": { "crypto": false } } --- bundled output (OSV-MAL flagged — LLM scope expansion) --- --- enc-base64.js (bundled) --- ;(function (root, factory) { if (typeof exports === "object") { // CommonJS module.exports = exports = factory(require("./core")); } else if (typeof define === "function" && define.amd) { // AMD define(["./core"], factory); } else { // Global (browser) factory(root.CryptoJS); } }(this, function (CryptoJS) { (function () { // Shortcuts var C = CryptoJS; var C_lib = C.lib; var WordArray = C_lib.WordArray; var C_enc = C.enc; /** * Base64 encoding strategy. */ var Base64 = C_enc.Base64 = { /** * Converts a word array to a Base64 string. * * @param {WordArray} wordArray The word array. * * @return {string} The Base64 string. * * @static * * @example * * var base64String = CryptoJS.enc.Base64.stringify(wordArray); */ stringify: function (wordArray) { // Shortcuts var words = wordArray.words; var sigBytes = wordArray.sigBytes; var map = this._map; // Clamp excess bits wordArray.clamp(); // Convert var base64Chars = []; for (var i = 0; i < sigBytes; i += 3) { var byte1 = (words[i >>> 2] >>> (24 - (i % 4) * 8)) & 0xff; var byte2 = (words[(i + 1) >>> 2] >>> (24 - ((i + 1) % 4) * 8)) & 0xff; var byte3 = (words[(i + 2) >>> 2] >>> (24 - ((i + 2) % 4) * 8)) & 0xff; var triplet = (byte1 << 16) | (byte2 << 8) | byte3; for (var j = 0; (j < 4) && (i + j * 0.75 < sigBytes); j++) { base64Chars.push(map.charAt((triplet >>> (6 * (3 - j))) & 0x3f)); } } // Add padding var paddingChar = map.charAt(64); if (paddingChar) { while (base64Chars.length % 4) { --- enc-base64url.js (bundled) --- ;(function (root, factory) { if (typeof exports === "object") { // CommonJS module.exports = exports = factory(require("./core")); } else if (typeof define === "function" && define.amd) { // AMD define(["./core"], factory); } else { // Global (browser) factory(root.CryptoJS); } }(this, function (CryptoJS) { (function () { // Shortcuts var C = CryptoJS; var C_lib = C.lib; var WordArray = C_lib.WordArray; var C_enc = C.enc; /** * Base64url encoding strategy. */ var Base64url = C_enc.Base64url = { /** * Converts a word array to a Base64url string. * * @param {WordArray} wordArray The word array. * * @param {boolean} urlSafe Whether to use url safe * * @return {string} The Base64url string. * * @static * * @example * * var base64String = CryptoJS.enc.Base64url.stringify(wordArray); */ stringify: function (wordArray, urlSafe) { if (urlSafe === undefined) { urlSafe = true } // Shortcuts var words = wordArray.words; var sigBytes = wordArray.sigBytes; var map = urlSafe ? this._safe_map : this._map; // Clamp excess bits wordArray.clamp(); // Convert var base64Chars = []; for (var i = 0; i < sigBytes; i += 3) { var byte1 = (words[i >>> 2] >>> (24 - (i % 4) * 8)) & 0xff; var byte2 = (words[(i + 1) >>> 2] >>> (24 - ((i + 1) % 4) * 8)) & 0xff; var byte3 = (words[(i + 2) >>> 2] >>> (24 - ((i + 2) % 4) * 8)) & 0xff; var triplet = (byte1 << 16) | (byte2 << 8) | byte3; for (var j = 0; (j < 4) && (i + j * 0.75 < sigBytes); j++) { base64Chars.push(map.charAt((triplet >>> (6 * (3 - j --- enc-latin1.js (bundled) --- ;(function (root, factory) { if (typeof exports === "object") { // CommonJS module.exports = exports = factory(require("./core")); } else if (typeof define === "function" && define.amd) { // AMD define(["./core"], factory); } else { // Global (browser) factory(root.CryptoJS); } }(this, function (CryptoJS) { return CryptoJS.enc.Latin1; })); --- format-openssl.js (bundled) --- ;(function (root, factory, undef) { if (typeof exports === "object") { // CommonJS module.exports = exports = factory(require("./core"), require("./cipher-core")); } else if (typeof define === "function" && define.amd) { // AMD define(["./core", "./cipher-core"], factory); } else { // Global (browser) factory(root.CryptoJS); } }(this, function (CryptoJS) { return CryptoJS.format.OpenSSL; })); --- hmac-ripemd160.js (bundled) --- ;(function (root, factory, undef) { if (typeof exports === "object") { // CommonJS module.exports = exports = factory(require("./core"), require("./ripemd160"), require("./hmac")); } else if (typeof define === "function" && define.amd) { // AMD define(["./core", "./ripemd160", "./hmac"], factory); } else { // Global (browser) factory(root.CryptoJS); } }(this, function (CryptoJS) { return CryptoJS.HmacRIPEMD160; })); --- hmac-sha224.js (bundled) --- ;(function (root, factory, undef) { if (typeof exports === "object") { // CommonJS module.exports = exports = factory(require("./core"), require("./sha256"), require("./sha224"), require("./hmac")); } else if (typeof define === "function" && define.amd) { // AMD define(["./core", "./sha256", "./sha224", "./hmac"], factory); } else { // Global (browser) factory(root.CryptoJS); } }(this, function (CryptoJS) { return CryptoJS.HmacSHA224; })); --- hmac-sha256.js (bundled) --- ;(function (root, factory, undef) { if (typeof exports === "object") { // CommonJS module.exports = exports = factory(require("./core"), require("./sha256"), require("./hmac")); } else if (typeof define === "function" && define.amd) { // AMD define(["./core", "./sha256", "./hmac"], factory); } else { // Global (browser) factory(root.CryptoJS); } }(this, function (CryptoJS) { return CryptoJS.HmacSHA256; })); --- hmac-sha384.js (bundled) --- ;(function (root, factory, undef) { if (typeof exports === "object") { // CommonJS module.exports = exports = factory(require("./core"), require("./x64-core"), require("./sha512"), require("./sha384"), require("./hmac")); } else if (typeof define === "function" && define.amd) { // AMD define(["./core", "./x64-core", "./sha512", "./sha384", "./hmac"], factory); } else { // Global (browser) factory(root.CryptoJS); } }(this, function (CryptoJS) { return CryptoJS.HmacSHA384; })); --- hmac-sha512.js (bundled) --- ;(function (root, factory, undef) { if (typeof exports === "object") { // CommonJS module.exports = exports = factory(require("./core"), require("./x64-core"), require("./sha512"), require("./hmac")); } else if (typeof define === "function" && define.amd) { // AMD define(["./core", "./x64-core", "./sha512", "./hmac"], factory); } else { // Global (browser) factory(root.CryptoJS); } }(this, function (CryptoJS) { return CryptoJS.HmacSHA512; })); --- lib-typedarrays.js (bundled) --- ;(function (root, factory) { if (typeof exports === "object") { // CommonJS module.exports = exports = factory(require("./core")); } else if (typeof define === "function" && define.amd) { // AMD define(["./core"], factory); } else { // Global (browser) factory(root.CryptoJS); } }(this, function (CryptoJS) { (function () { // Check if typed arrays are supported if (typeof ArrayBuffer != 'function') { return; } // Shortcuts var C = CryptoJS; var C_lib = C.lib; var WordArray = C_lib.WordArray; // Referenc
